Test/demonstration network for NVT prototype will be a subset of HlSb's network. (Decision 
made a TIM #5.) 



►Set up network for NVT lab in W3/2607 

• Upgraded Lab to Visual Studio 6.0 

• Visual Basic 6.0 

» Purchase order placed for VisualWorks 3.0 ? 



•After considerable effort, resolved Smalltalk/ANSSR issues; 

•ANSSR was written in ObjectWorks Smalltalk version 4.1 

•Encountered challenges in integrating this tool under Visual Smalltalk due to 

Smalltalk compatibility issues 
•Solved most compatibility issues by using VisualWorks Smalltalk, a readily available 

successor to ObjectWorks 
•ANSSR has now been successfully built under VisualWorks 3.0 

• Testing is ongoing, but outlook for use of ANSSR under VisualWorks Smalltalk 3.0 is promising 

• Output from ANSSR is a Vulnerabilities Report (ascii text file) which contains 

• Summary information 

• For each component in the network, a list of vulnerabilities and a # (rating or 
ranking?) 



Could be used as one way to resolve incomplete data problem. Used to ping network 
node to discover information about the node. 



►The CRADA with NSA through which we would obtain a copy of RAM is still unsigned, tied up in 
NSA legal. 

•The delay in obtaining a copy of RAM from NSA is impacting the schedule for the development of 
the NVT prototype. By the end of December, we should have completed the acquisition and 
initial study of each vulnerability assessment tool, as well as have designed our initial prototype. 
Without a copy of RAM, we cannot complete an initial study of integration issues involved with 
the tool, or complete the initial design. 

• Therefore, if the CRADA is not completed soon, we will need to resort to Plan B, which is to use 
the Harris STAT vulnerability DB. 



OpenView D.Ol (which is currently installed in NVT Lab, purchased in February and 
received in March 1998) supports Visual Basic 3.0. OpenView D.03 (most recent 
release) supports Visual Basic 4.0 (and 3.0). But we have Visual Basic 6.0, and thus 
have a compatibility problem. Because of this, we will not be able to use some HP 
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Visual tools, which would have made it easier to integrate with Visual Studio 6.0. 



